Re: Ransomware meets Linux - on the command line!
On 11/11/15, Cindy-Sue Causey <butterflybytes@gmail.com> wrote:
>
> For fun, I checked my inbox for any references to the ransomware.
> There are ZERO references in what's probably at least 150,000 emails
> or more. For that reason, I'm adding the name here: Ransm-C and
> Linux/Ransm-C so this thread becomes searchable for it. :)
After I "hung up the cyber phone" aka sent that last email, I searched
my inbox for the word "ransomware". *smacking my head* for not
thinking to do so originally. Brian Krebs of Krebs On Security had
something on ransomware and Linux, just not labeled Ransm-C or
anything:
http://krebsonsecurity.com/2015/11/ransomware-now-gunning-for-your-web-sites/
IF I'm understanding correctly, he appears to have updated that
article with a *potential* way to beat it via a *potential*
vulnerability.... at least until the perpetrators upgrade their own
tactics, anyway.
I like what Brian's been doing. I can cognitively understand a LOT of
what he writes about. He's caught SlashDot's eye a time or two, too.
Adding another keyword here, Linux.Decoder.1, which Brian says was a
name dubbed by "Russian antivirus and security firm Dr.Web". It may or
may not be the same as the other, but sounds like it works
similar'ISH.
Next stop is to pop over to a group called BlindWebbers. I'd seen
Brian's email subject line earlier and thought instantly of them, just
didn't get around to opening it then. The guy in Brian's article makes
it sound like it's a little time consuming and still has incidental
glitches afterwards.
That's presumably coming from someone with no visual disabilities. The
difficulty level of getting one's website back would understandably
rise relative to one's ability or lack thereof to actually see what's
going on within the file hierarchy..... AND apparently each single
file that reportedly stands to potentially gather random bits AFTER
the files have been decrypted.
Just thinking out loud...
Cindy
--
Cindy-Sue Causey
Talking Rock, Pickens County, Georgia, USA
* runs with plastic sporks *
Reply to: